Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          0lw2uUxEViwC70Do30tpG3Qdj4cNBKdoaGId9F3KIkM=
Subject key identifier:   3E:64:E1:5E:96:AB:9F:F7:14:F0:6E:4B:1A:E2:7D:0F:F9:30:50:49
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       0199FD6AFC31B32B2332134C50AB6DB9EE12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          177E
Signing time:             Sun 19 Oct 2025 17:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:10 +0000
Files and hashes:         1: 0zqU-vNXZ2phU0OLDTydQoGFH8Q.roa (hash: +gP0NPBpHn9gACyGVaIVIcNnU3nAFyTkDtrpKge+z2I=)
                          2: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: 5aJP0o0RAcQEmFz/dD9jzMEROUjUkabT6ldgQhjjpVY=)
                          4: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          5: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          6: fsCpcWbx8Z1eo5cYhqs4znqfBw0.roa (hash: 2EkDKLPS7K1At/yNNFD/xXPTEKBT3zJVxYZiJe5gvgs=)
                          7: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:fc:31:b3:2b:23:32:13:4c:50:ab:6d:b9:ee:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Oct 19 17:01:10 2025 GMT
            Not After : Oct 20 17:01:10 2025 GMT
        Subject: CN=3e64e15e96ab9ff714f06e4b1ae27d0ff9305049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0a:a0:a8:f3:4f:9d:b3:47:70:ae:8c:7f:52:
                    70:dc:f0:f2:8c:1b:58:26:a9:f2:8a:e6:fd:1a:01:
                    e0:bf:85:ec:b4:73:19:b6:05:bf:89:7a:ba:85:45:
                    ae:d0:62:b6:b3:72:75:10:9b:4a:35:45:ae:bb:31:
                    74:e0:d2:a1:ff:ca:e8:11:7c:e9:19:e4:54:47:56:
                    66:4d:51:5d:18:91:c2:02:85:ca:f9:a5:b7:c2:73:
                    2c:e5:42:26:39:86:8b:97:c6:a5:d2:de:b6:6c:c4:
                    8d:40:09:c1:0d:00:50:30:0e:11:1e:47:7b:9b:18:
                    84:2f:60:cc:83:68:37:44:9f:27:ca:b3:7e:6e:8a:
                    81:df:78:42:95:84:6b:34:8e:43:aa:53:f0:c2:32:
                    54:e7:52:e1:95:9a:41:a3:83:92:b2:34:45:a4:f6:
                    2e:c0:44:5e:dd:81:c4:ca:a2:f6:56:b7:d4:d4:87:
                    ed:78:89:b6:22:8f:40:59:35:3e:bd:e3:ea:11:4d:
                    44:8d:f3:fc:90:d5:fb:3e:46:77:75:06:df:f7:8f:
                    8d:40:f4:69:17:37:e9:8c:da:2b:20:82:49:85:5d:
                    3b:6a:38:19:df:85:1f:7b:75:7a:9c:5b:b0:8f:32:
                    3e:5d:89:9e:f9:89:c7:ed:6a:69:6d:1d:f9:3f:51:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:64:E1:5E:96:AB:9F:F7:14:F0:6E:4B:1A:E2:7D:0F:F9:30:50:49
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:2b:90:a9:89:c2:21:f0:54:8f:44:c2:06:a7:7a:c3:d2:
         bb:30:7d:b3:12:00:36:bd:b2:9e:65:f8:2f:48:b9:f3:d1:20:
         d2:35:5e:25:14:22:53:25:c3:cd:5d:ec:73:f8:36:b8:ea:c7:
         9c:b8:89:c8:4c:72:05:55:fb:49:72:86:ee:9f:f0:b8:09:d7:
         20:fa:76:04:c0:d8:dd:b0:b8:81:fe:2f:48:ea:04:75:58:51:
         12:22:aa:4e:67:b6:90:3b:36:59:84:2a:5d:af:bc:e3:1e:48:
         53:e6:c9:18:e0:d4:b6:cd:e5:d6:54:11:ba:07:d9:dd:10:a3:
         56:a3:f2:28:90:5b:f0:23:d0:dc:5b:db:c0:72:4d:b7:40:c2:
         c2:67:59:bf:31:09:16:46:db:15:d6:4c:83:f2:91:a0:ee:59:
         99:72:08:fb:b2:00:17:bb:1e:87:fa:87:91:cd:22:7f:f6:62:
         90:4f:18:b8:8b:99:7e:38:1b:b0:d2:6e:34:4c:a3:17:c2:66:
         fe:5a:28:3f:69:d5:f3:c5:78:27:4b:d8:c2:c0:4b:ea:63:74:
         e5:f2:fc:00:a2:7f:1c:19:2c:c5:01:ce:b8:ab:2f:e3:4c:0b:
         0a:ef:46:52:7f:ea:d4:fb:f6:d9:76:72:7b:36:3b:56:90:50:
         f6:65:42:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:17 2025 by rpki-client